Tier 2 Cyber Analyst Remediation-Senior (Government) at AT&T in Fairfax, Virginia

Job Description:

AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the   Intelligence Community. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.

Our National Security Team supports the intelligence community, providing, operating and assuring critical voice, video and collaboration services for the full spectrum of operations.

AT&T has an opening for Tier 2 Cyber Analyst – Remediation to support the Network Operations Center in providing Tier 2 cyber expertise.

Description of Job Duties/Responsibilities:

• Primary analysis and remediation.
• Supports a 24x7x365 Security Operations Center and monitors security tools, assesses threats, and risks involving client infrastructure.
• Provides analysis and remediation tier response to security incidents for managed services customers.
• Provides firewall change management and change control services.
• Follows standard operating procedures for detecting, classifying, and reporting incidents under the supervision of the SOC Manager and in partnership with Tier 2 SOC Analysts.

Required Clearance: TSSCI with polygraph. (#polygraph)     

Required Qualifications/Certifications: Candidate must have a total of 10 years of applicable experience. The experience can be a combination of degree and work history. This can be a High School degree and 10 years of work history OR an Associate’s and 8 years, a Bachelors’ and 6 years, a Masters and 1 years or a PhD and 0 years of work history.

• Experience in analyzing security logs generated by Intrusion Detection/Prevention Systems (IDS/IPS) is required.
• Experience performing security analysis using Security and Incident Event Management (SIEM) technologies systems is required.
• Experience performing analysis utilizing IDS consoles is required.
• Experience with Linux is preferred.
• ARCSIGHT and SPLUNK.

Required Qualifications/Certifications: One of the following certifications: Security+, CEH, GCIA, CISSP or similar.

Ready to join our team? Apply today!